Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6974915A576E11F1867F3716CF1D38B0.roa
File: 6974915A576E11F1867F3716CF1D38B0.roa (raw, json)
Hash identifier: MkWgIuGSgQPAPo/E9AlnpN8wr1xqYiDQJOf8g/bWwko=
Subject key identifier: 74:AA:66:DE:CD:3A:1D:7B:C6:8C:07:BA:32:B2:33:17:61:AC:79:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6974915A576E11F1867F3716CF1D38B0.roa
Signing time: Sun 24 May 2026 12:45:16 +0000
ROA not before: Sun 24 May 2026 12:45:11 +0000
ROA not after: Fri 10 Jul 2026 12:45:11 +0000
asID: 20326
IP address blocks: 45.202.100.0/23 maxlen: 24
45.206.10.0/23 maxlen: 24
45.206.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112870 (0x1b8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 12:45:11 2026 GMT
Not After : Jul 10 12:45:11 2026 GMT
Subject: CN=6a12f2db-77aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:ba:60:d3:89:5c:07:71:81:25:02:3f:9d:
1f:77:f5:f2:64:0e:a3:3d:d1:3c:62:7b:19:5b:06:
40:08:8b:65:d4:19:5d:88:39:c9:ae:bc:83:8f:53:
2f:f9:b1:35:b1:78:77:64:48:be:63:d2:6b:88:3f:
75:eb:f7:b9:fb:06:1f:be:24:52:8e:69:ec:40:ff:
83:3a:96:08:05:6e:42:95:04:44:0d:38:c0:23:3d:
3c:67:d4:35:3e:4e:be:9f:47:26:ae:2f:0a:79:54:
4f:55:8a:74:71:a9:ea:a1:06:c8:ec:18:5c:0e:cb:
b2:ed:35:c8:08:fd:89:f8:b5:7b:fb:a3:1d:20:e6:
7a:86:36:19:20:26:ca:f7:32:d6:77:ff:3e:da:97:
c2:50:48:dc:9e:49:d2:b0:5a:04:1f:a9:1f:c3:cf:
f2:3d:2b:78:aa:6f:fe:52:4f:8a:a3:13:ec:a9:69:
67:65:7a:a7:25:93:ac:a1:8f:01:1c:3a:d3:5e:78:
c4:c4:03:f9:db:0e:a8:31:bc:5f:1a:e7:3f:25:27:
a0:c9:f7:b1:e4:7d:ad:91:f4:e6:94:52:86:3b:80:
7f:1b:6d:51:9c:3e:e5:11:6f:fe:84:c6:25:e8:7e:
47:48:29:a4:8c:2e:e7:da:76:3a:ad:19:16:df:58:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:66:DE:CD:3A:1D:7B:C6:8C:07:BA:32:B2:33:17:61:AC:79:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6974915A576E11F1867F3716CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.100.0/23
45.206.10.0/23
45.206.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:4f:57:22:60:d2:7b:2f:18:83:91:b1:95:2a:1b:26:9a:b3:
6e:2d:6b:12:d4:a7:70:05:ba:d6:cc:5d:1c:c2:29:14:3b:07:
63:5c:d7:72:22:0a:b2:52:18:ce:20:9d:81:fb:0f:8c:7d:2d:
db:af:f1:84:09:ad:ba:d2:e8:57:0a:73:cf:8e:62:31:09:db:
76:fb:ba:ff:c4:34:4e:73:d9:9d:62:41:c1:97:d4:ee:87:0d:
4e:34:71:d7:f7:82:ed:be:fe:fb:27:ae:cc:40:4b:7a:5f:cb:
cc:90:cc:22:52:fb:36:7d:88:71:c7:df:47:a9:0d:9b:09:aa:
b3:19:c5:2f:cc:00:12:5d:84:cd:71:23:55:51:e1:19:08:fb:
58:ea:0c:95:e6:72:52:80:37:60:30:b2:08:1b:bf:8f:4a:e8:
9c:43:6f:de:b1:16:4c:1c:68:54:f3:72:ff:a2:22:82:0e:3f:
4b:95:7c:fa:6d:19:6a:a3:44:aa:52:ec:02:ef:0d:86:c1:9e:
02:bb:c4:63:a8:69:82:ec:23:7b:8d:5e:7d:15:e6:3b:13:bf:
de:5e:83:0f:42:ad:1d:8c:60:01:ba:da:2e:89:8a:35:97:1f:
e5:ba:6b:68:b9:a3:17:f6:68:f9:4f:40:83:7b:ab:f3:b9:40:
76:71:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:39 2026 by rpki-client